GPL 3 may tackle Web loophole

By Ingrid Marson, ZDNet UK
Wednesday, September 28, 2005 11:31 AM

The next version of the General Public License may tackle the issue of Web companies that use free software in commercial Web-based applications but don't distribute the source code.

At present, companies that distribute GPL-licensed software must make the source code publicly available, including any modifications they've made. Though the rule covers many businesses that use GPL-licensed software for commercial ends, it doesn't cover Web companies that use such software to offer their services through the Web, as they're not actually distributing the software.

GPL 3, the next version of the free software license, a draft of which is expected to be released in early 2006, may close this loophole, GPL author and Free Software Foundation head Richard Stallman said in an interview with publisher O'Reilly Media.

Stallman said developers may be encouraged to add a command to their GPL-licensed Web application that lets users download the source code. The inclusion of this command in modified versions of the program will then be enforced by an additional clause in GPL 3.

"We're looking at an approach where programs used (on a public server) will have to include a command for the user to download the source for the version that is running," Stallman said. "If you release a program that implements such a command, GPL 3 will require others to keep the command working in their modified versions of the program."

This change would have no effect on existing software but could be added by developers to future versions of a particular program, according to Stallman. He said this was only a "tentative plan" as it has not yet been studied fully to see whether it would work.

GPL 3 may also include a clause to penalize companies that use software patents against free software and a clause to prevent companies from using digital rights management in free software applications. Stallman said one possible way that it might handle DRM is by forcing companies to distribute the signature keys of the binaries of free software applications.

"We are thinking about a clause requiring distribution, with the software, of any signature keys necessary to sign the binary so that it can run and fully utilize the machine's facilities. This would prevent the perversion of a supposedly 'free' program, which nominally you are allowed to change, except that modified versions are prevented from functioning," said Stallman.

One clause that is unlikely to be significantly changed in GPL 3 is the clause that forbids translations, although the Free Software Foundation is considering allowing translated versions that can be used in only one country.

"Authorizing a translation of the GPL is very risky, because a mistake could be disastrous worldwide. Most of the world's major languages are known by neither me nor Eben Moglen (general counsel for the FSF). We would have to rely on translators who are lawyers but not necessarily free software supporters, and we could not check their work. Thus, mistakes would be rather likely," said Stallman.

"We're thinking about the idea of authorizing translations that are valid for one country only. That could reduce the risk to the point where we could consider it," he said.


WORTHWHILE?

0

0 votes
Blog

Talkback 4 comments

A link to the site's application code on the website itself?
Criminal's must be salivating... not only can you target the bank's website, you'll get a complete floor plan at the front door.
Let the mayhem begin.
Posted by How open is too open? on Thursday, September 29 2005 04:37 AM

Google Linux? If Linux goes GPL3, will that mean we can finally see Google's modification to the Linux kernel?
Posted by alucinor on Thursday, September 29 2005 05:18 AM

Even though this would be a nice clause this will lead to GPL's demise.

Do you really think a company such as Google will accept a license that will force them to reveal their crown jewels?

Goodbye GPL, nice knowing you!
Posted by Christiaan Erasmus on Thursday, September 29 2005 02:17 PM

I'm running an intranet based on eGroupWare.

If you can code safely, you can share your code. There's always two ways to be secure: close the source and hope nobody finds holes, or share the source and have others find the holes and report them.

It seems to me that the open source model works very well, but that's just my opinion.
Posted by How closed is too closed? on Thursday, September 29 2005 05:46 PM


Tech Jobs Now!

Search for your ideal tech job:

Use shades of gray to enhance scale in Excel

Microsoft Office Suite

Excel's palette is generous, but don't throw buckets of pigment all over your spreadsheets just because you can.


Read more »



Ultimate 2012 recovery site: the moon

Blog thumbnail

Have you seen the disaster movie "2012"? A friend from Control Risks and I did, and we reluctantly concluded we wouldn't be able to write off the cost of our..... by Nathaniel Forbes

Read more »

Tags

  1. antivirus
  2. apple ipod
  3. cnet networks inc.
  4. desktop
  5. e - mail
  6. hard drive
  7. intuit inc.
  8. mcafee inc.
  9. microsoft corp.
  10. microsoft windows
  11. microsoft windows vista
  12. microsoft windows xp
  13. norton co.
  14. pc
  15. performance
  16. security
  17. software
  18. tool
  19. web
  20. web site